4
votes

I have successfully let users to connect to my web application with twitter oauth. And I can insert user information after they logged in.

My problem with is that existing users are always redirected to the Allow/Deny application screen on twitter each time they click on sign in with twitter.

How can I skip this step for my existing users so they don't have to click on allow every time they sign in?

I am using this library: http://www.haughin.com/code/twitter/

thanks.

2

2 Answers

3
votes

This is done with the Sign in with Twitter flow. Instead of sending users to https://api.twitter.com/oauth/authorize?oauth_token=xyz send them to https://api.twitter.com/oauth/authenticate?oauth_token=xyz. In this case if the user has previously authorized your app and are already authenticated with twitter.com they will automatically be redirected back to your app without being prompted to allow/deny access.

-1
votes

When a user authorizes your application to use their Twitter account, Twitter gives you two tokens: OAuthToken and OAuthTokenSecret.

Stores these tokens in a cookie, or a settings file, or whatever.

Then, the next time you need to make a request to Twitter on behalf of this user, you use those tokens.